Hi Brian, On Fri, Oct 10, 2008 at 2:31 PM, <[email protected]> wrote:

I've got XWiki 1.6 now downloaded and installed. I've configured it to authenticate using the LDAP implementation against my Active Directory (which I already have working in an XWiki 1.1-m1 installation). However, my attempts to log in are futile. I've turned on DEBUG logging and found this:

LDAP Bind starting LDAP Bind successfull LDAP Bind returned with result true LDAP searching user LDAP searching found user LDAP searching found DN: CN=Brij0429,CN=Users,DC=mid7000nt,DC=mlan LDAP comparing password LDAP Password check for user brij0429 failed with exception No Such Attribute LDAP check in finally block LDAP Password check reverting to XWiki Password check for user null failed User brij0429 login has failed

What is your exact log ?

The password check is failing? However, in my xwiki.cfg, I've left the password validation DISABLED:

#-# Force to check password after LDAP connection #-# 0: disable #-# 1: enable xwiki.authentication.ldap.validate_password=0

What am I missing?

Which LDAP authenticator are you using ? LDAPAuthServiceImpl or XWikiLDAPAuthServiceImpl ? Since XWiki 1.6 XWikiLDAPAuthServiceImpl is the default LDAP authenticator and have some differences in configurations. See http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication and http://platform.xwiki.org/xwiki/bin/view/AdminGuide/AuthenticationLdapOld. By the way there is a bug in LDAP 1.6. It's already fixed and it will be included in 1.6.1. In the meantime you can use last snapshot of xwiki-core jar (download it at http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-SNAPS...) or use the old authenticator (which is the one you used before I think as the new LDAP authenticator only exists since XWiki 1.3). You can force using the old one with xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.LDAPAuthServiceImpl in xwiki.cfg.

Regards, Brian.

----------------------------------------- CONFIDENTIALITY STATEMENT: This e-mail transmission contains information that is intended to be confidential. It is intended only for the addressee named above. If you receive this e-mail in error, please do not read, copy, or disseminate it. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne